Re: dev-tech-crypto Digest, Vol 5, Issue 13

2006-05-18 Thread Jean-Marc Desperrier
Peter Djalaliev wrote: So there is patch for including the Hello extension? Where can I find it? Is it in some kind of a nightly build or in the CVS directory? You probably should read the following to see more precisely what it's all about :

Re: FIPS 140-2 certification plans

2006-05-18 Thread David Stutzman
I just noticed on the FIPS page what might be an error... http://wiki.mozilla.org/FIPS_Validation The HMAC row of the table has the following in the Modes column: KeySize BlockSize, KeySize = BlockSize, KeySize BlockSize Should one of those be a ? Let me know if there's someone/where else

Re: FIPS 140-2 certification plans

2006-05-18 Thread Wan-Teh Chang
David Stutzman wrote: I just read an interesting article about the FIPS certification of OpenSSL which was brought on by the Defense Department’s Defense Medical Logistics Standard Support program. It says that they had the source verified instead of the binary and Because the source code was

NSS Apache module - mod_nss

2006-05-18 Thread Rob Crittenden
A fair bit of work has been done to mod_nss, an SSL module for Apache that uses NSS instead of OpenSSL, since it was released last September. Changes since then include use the NSS OCSP client, addition of a FIPS mode (similar to modutil -fips true -dbdir /path/to/database), options to seed

Re: NSS Apache module - mod_nss

2006-05-18 Thread Nelson B. Bolyard
Rob Crittenden wrote: A fair bit of work has been done to mod_nss, an SSL module for Apache that uses NSS instead of OpenSSL, since it was released last September. Changes since then include use the NSS OCSP client, addition of a FIPS mode (similar to modutil -fips true -dbdir

Re: NSS Apache module - mod_nss

2006-05-18 Thread Wan-Teh Chang
Rob Crittenden wrote: A fair bit of work has been done to mod_nss, an SSL module for Apache that uses NSS instead of OpenSSL, since it was released last September. Changes since then include use the NSS OCSP client, addition of a FIPS mode (similar to modutil -fips true -dbdir

Re: NSS Apache module - mod_nss

2006-05-18 Thread Julien Pierre
Wan-Teh Chang wrote: Rob Crittenden wrote: A fair bit of work has been done to mod_nss, an SSL module for Apache that uses NSS instead of OpenSSL, since it was released last September. Changes since then include use the NSS OCSP client, addition of a FIPS mode (similar to modutil -fips true